$ rpki-client -vvvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json) Hash identifier: bG9ozUPzdPn0+jkkUScFz2PIKdeMgyrIXo3fF/wevFI= Subject key identifier: 83:98:B8:12:24:50:64:4D:EE:1F:04:EC:E5:D6:68:BF:4D:1F:E2:DF Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Certificate serial: 3581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft Manifest number: 3581 Signing time: Thu 24 Sep 2026 14:50:55 +0000 Manifest this update: Thu 24 Sep 2026 14:50:55 +0000 Manifest next update: Thu 01 Oct 2026 14:50:55 +0000 Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: YMGXRgwMC7+yWpqaqg9LVBnwuzEbNUJsmkOZxWK7PRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13697 (0x3581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918429B, serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Validity Not Before: Sep 24 14:50:55 2026 GMT Not After : Oct 1 14:50:55 2026 GMT Subject: CN=6ab538cf-b9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:38:45:33:fb:15:d4:60:a3:46:62:39:2c: 0b:4c:5e:b3:b4:90:80:ca:69:7a:92:09:52:da:74: 56:94:a3:9f:41:f8:b4:6d:5e:5b:90:86:dd:31:04: 44:12:81:6a:ea:b0:2d:b1:d9:d8:02:63:ce:f8:2a: 25:73:15:23:de:30:fc:be:d9:3b:d0:7d:d1:c5:46: 32:5d:2c:4a:c9:7d:94:c7:00:20:fe:9b:17:cd:ca: 41:eb:66:84:7d:bb:bd:7e:5c:8f:ee:29:74:7e:6a: 87:be:bc:e2:03:12:7a:1f:6d:11:f6:d2:2a:7d:3e: 35:c0:ef:ef:eb:67:ec:1e:63:7e:0e:9d:c1:e6:69: c1:69:24:cb:1f:15:b9:61:42:7a:5f:2a:da:68:10: d8:92:db:ad:41:14:9e:00:db:99:49:2a:68:70:0e: ee:54:66:0f:4b:2c:74:66:6b:f8:d1:d4:d8:a8:58: ed:3a:78:89:47:83:95:53:e2:29:d7:b7:68:b9:bf: 21:f9:9c:79:3a:0a:db:ff:24:63:ef:98:a7:1c:ac: fc:64:de:ac:fb:11:b9:67:2a:6a:2e:2e:ea:fd:a2: 60:f6:39:18:90:ef:88:b7:ad:e6:a8:15:f9:80:80: 75:9f:14:d5:59:05:3a:5b:d8:db:46:07:07:5e:98: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:98:B8:12:24:50:64:4D:EE:1F:04:EC:E5:D6:68:BF:4D:1F:E2:DF X509v3 Authority Key Identifier: keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:dc:67:b5:88:54:cb:50:c5:c5:e1:44:c2:6f:f0:e6:aa:55: e1:0e:1e:38:92:e8:83:b7:b5:e0:5f:6a:4a:f5:6b:d8:a9:5b: a2:ff:de:2f:8d:4f:a9:3d:c2:69:88:1d:8a:7c:20:84:b9:cb: d7:5a:49:ba:06:8a:d2:d6:fb:61:ef:e6:58:11:72:5d:9d:ac: 63:5e:02:ca:a0:b1:6e:63:9b:be:d7:93:b2:c9:49:76:9f:98: 37:8b:7f:ef:05:95:6c:b5:7b:b1:9b:7c:87:6e:db:18:0b:67: 1a:46:65:a2:37:08:44:aa:78:a6:03:55:5f:e2:67:2f:81:31: 42:07:d0:e8:08:df:9d:e1:6a:41:d7:14:45:06:70:67:8f:c4: f2:11:c5:04:e9:4d:d8:e6:4e:e5:2f:bf:aa:df:1a:9d:1e:e3: 0d:f3:6d:57:74:47:58:56:f5:51:81:a8:2a:48:8f:f7:99:6d: 40:2a:7c:bc:e2:d5:fc:9d:e5:24:5f:95:fd:56:af:91:a9:0d: 77:0a:71:92:4f:00:d4:8b:3b:91:6f:ff:ad:28:da:a1:01:8a: 93:51:a2:a8:8d:f8:40:e1:85:84:75:10:0e:1e:af:85:b3:6b: e4:6b:1a:52:60:63:0b:f1:43:40:44:a6:bd:05:26:fb:6e:95: 9c:e0:a4:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyOUIxMTAvBgNVBAUTKDZBREU0RTFDNEUxQzA5QkYxNERGQUE0QzNENjAwRjQx OEUxN0U3MkUwHhcNMjYwOTI0MTQ1MDU1WhcNMjYxMDAxMTQ1MDU1WjAYMRYwFAYD VQQDEw02YWI1MzhjZi1iOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGQ4RTP7FdRgo0ZiOSwLTF6ztJCAyml6kglS2nRWlKOfQfi0bV5bkIbdMQRE EoFq6rAtsdnYAmPO+ColcxUj3jD8vtk70H3RxUYyXSxKyX2UxwAg/psXzcpB62aE fbu9flyP7il0fmqHvrziAxJ6H20R9tIqfT41wO/v62fsHmN+Dp3B5mnBaSTLHxW5 YUJ6XyraaBDYktutQRSeANuZSSpocA7uVGYPSyx0Zmv40dTYqFjtOniJR4OVU+Ip 17doub8h+Zx5Ogrb/yRj75inHKz8ZN6s+xG5ZypqLi7q/aJg9jkYkO+It63mqBX5 gIB1nxTVWQU6W9jbRgcHXphTlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOYuBIk UGRN7h8E7OXWaL9NH+LfMB8GA1UdIwQYMBaAFGreThxOHAm/FN+qTD1gD0GOF+cu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI5Qi9CNjAwNjNBQzFE OTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0NiOFUzNnBNUFdBUFFZNFg1 eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NU9IRTRjQ2I4VTM2cE1QV0FQUVk0WDV5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI5Qi9CNjAwNjNBQzFEOTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0Ni OFUzNnBNUFdBUFFZNFg1eTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu9xntYhUy1DFxeFEwm/w5qpV4Q4eOJLog7e14F9qSvVr2Klbov/eL41PqT3C aYgdinwghLnL11pJugaK0tb7Ye/mWBFyXZ2sY14CyqCxbmObvteTsslJdp+YN4t/ 7wWVbLV7sZt8h27bGAtnGkZlojcIRKp4pgNVX+JnL4ExQgfQ6AjfneFqQdcURQZw Z4/E8hHFBOlN2OZO5S+/qt8anR7jDfNtV3RHWFb1UYGoKkiP95ltQCp8vOLV/J3l JF+V/VavkakNdwpxkk8A1Is7kW//rSjaoQGKk1GiqI34QOGFhHUQDh6vhbNr5Gsa UmBjC/FDQESmvQUm+26VnOCk/A== -----END CERTIFICATE-----Generated at Thu Sep 24 19:47:45 2026 by rpki-client